replicas-engine 0.1.367 → 0.1.368

package/dist/src/index.js

@@ -295,7 +295,7 @@ var WORKSPACE_SIZES = ["small", "large"];
 var INVALID_WORKSPACE_SIZE_ERROR = `Invalid size: must be one of ${WORKSPACE_SIZES.join(", ")}`;
 
 // ../shared/src/e2b.ts
-var E2B_TEMPLATE_NAME = "replicas-sandbox-2026-06-29-v2";
+var E2B_TEMPLATE_NAME = "replicas-sandbox-2026-06-29-v3";
 
 // ../shared/src/runtime-env.ts
 function parsePosixEnvFile(content) {
@@ -1213,41 +1213,59 @@ This guide covers how to interact with Linear from within your Replicas workspac
 
 ## Prerequisites
 
-Check if the \`LINEAR_ACCESS_TOKEN\` environment variable is set:
+Check that the workspace has the Replicas engine credentials needed to proxy Linear requests:
 
 \`\`\`bash
-echo "\${LINEAR_ACCESS_TOKEN:+set}"
+test -n "$MONOLITH_URL" && test -n "$REPLICAS_ENGINE_SECRET" && test -n "$WORKSPACE_ID" && echo set
 \`\`\`
 
-- If **set**: Your workspace has Linear access. You can use the Linear GraphQL API as described below.
-- If **not set**: Linear has not been configured for this workspace. The user needs to connect Linear in the [Replicas dashboard](https://replicas.dev) under their organization's integration settings. Let the user know and do not attempt Linear operations.
+- If **set**: Use the Replicas Linear proxy below. It refreshes Linear OAuth tokens for you.
+- If **not set**: The workspace cannot authenticate to Replicas. Let the user know and do not attempt Linear operations.
+
+Then verify Linear is connected:
+
+\`\`\`bash
+curl -fsS -X POST "$MONOLITH_URL/v1/engine/linear/refresh-token" \\
+  -H "Authorization: Bearer $REPLICAS_ENGINE_SECRET" \\
+  -H "X-Workspace-Id: $WORKSPACE_ID" \\
+  -H "Content-Type: application/json" \\
+  -d '{}' >/dev/null
+\`\`\`
+
+If this fails because no Linear credential is connected, the user needs to connect Linear in the [Replicas dashboard](https://replicas.dev) under their organization's integration settings.
 
 ## Using the Linear API
 
-Linear uses a GraphQL API at \`https://api.linear.app/graphql\`. All requests use the \`$LINEAR_ACCESS_TOKEN\` for authentication.
+Linear uses a GraphQL API. Always call it through Replicas so the access token stays fresh:
+
+\`\`\`bash
+linear_graphql() {
+  curl -sS -X POST "$MONOLITH_URL/v1/engine/linear/graphql" \\
+    -H "Authorization: Bearer $REPLICAS_ENGINE_SECRET" \\
+    -H "X-Workspace-Id: $WORKSPACE_ID" \\
+    -H "Content-Type: application/json" \\
+    --data-binary @-
+}
+\`\`\`
 
 ### Fetching an Issue
 
 If you encounter a Linear issue link (e.g. \`https://linear.app/team/issue/ENG-123\`), the identifier is the last path segment (\`ENG-123\`).
 
 \`\`\`bash
-curl -s -X POST https://api.linear.app/graphql \\
-  -H "Authorization: Bearer $LINEAR_ACCESS_TOKEN" \\
-  -H "Content-Type: application/json" \\
-  -d '{
-    "query": "query { issues(filter: { identifier: { eq: \\"ENG-123\\" } }) { nodes { id identifier title description state { name } assignee { name } parent { identifier title description } } } }"
-  }'
+jq -n --arg identifier "ENG-123" '{
+  query: "query($identifier: String!) { issues(filter: { identifier: { eq: $identifier } }) { nodes { id identifier title description state { name } assignee { name } parent { identifier title description } } } }",
+  variables: { identifier: $identifier }
+}' | linear_graphql
 \`\`\`
 
 ### Updating Issue State
 
 \`\`\`bash
-curl -s -X POST https://api.linear.app/graphql \\
-  -H "Authorization: Bearer $LINEAR_ACCESS_TOKEN" \\
-  -H "Content-Type: application/json" \\
-  -d '{
-    "query": "mutation { issueUpdate(id: \\"ISSUE_UUID\\", input: { stateId: \\"STATE_UUID\\" }) { success issue { identifier state { name } } } }"
-  }'
+jq -n --arg issueId "ISSUE_UUID" --arg stateId "STATE_UUID" '{
+  query: "mutation($issueId: String!, $stateId: String!) { issueUpdate(id: $issueId, input: { stateId: $stateId }) { success issue { identifier state { name } } } }",
+  variables: { issueId: $issueId, stateId: $stateId }
+}' | linear_graphql
 \`\`\`
 
 To find available states, query: \`query { workflowStates { nodes { id name } } }\`
@@ -1255,23 +1273,19 @@ To find available states, query: \`query { workflowStates { nodes { id name } }
 ### Adding a Comment
 
 \`\`\`bash
-curl -s -X POST https://api.linear.app/graphql \\
-  -H "Authorization: Bearer $LINEAR_ACCESS_TOKEN" \\
-  -H "Content-Type: application/json" \\
-  -d '{
-    "query": "mutation { commentCreate(input: { issueId: \\"ISSUE_UUID\\", body: \\"Your comment here\\" }) { success comment { id } } }"
-  }'
+jq -n --arg issueId "ISSUE_UUID" --arg body "Your comment here" '{
+  query: "mutation($issueId: String!, $body: String!) { commentCreate(input: { issueId: $issueId, body: $body }) { success comment { id } } }",
+  variables: { issueId: $issueId, body: $body }
+}' | linear_graphql
 \`\`\`
 
 ### Searching Issues
 
 \`\`\`bash
-curl -s -X POST https://api.linear.app/graphql \\
-  -H "Authorization: Bearer $LINEAR_ACCESS_TOKEN" \\
-  -H "Content-Type: application/json" \\
-  -d '{
-    "query": "query { issueSearch(query: \\"search terms\\", first: 10) { nodes { identifier title state { name } } } }"
-  }'
+jq -n --arg query "search terms" '{
+  query: "query($query: String!) { issueSearch(query: $query, first: 10) { nodes { identifier title state { name } } } }",
+  variables: { query: $query }
+}' | linear_graphql
 \`\`\`
 
 ### Other Operations
@@ -1439,21 +1453,25 @@ FILENAME=$(basename "$FILE")
 SIZE=$(stat -c%s "$FILE" 2>/dev/null || stat -f%z "$FILE")
 CONTENT_TYPE=image/png
 ISSUE_UUID=...           # the Linear issue's UUID
-WORKSPACE_ID=...         # the Replicas workspace ID
 MEDIA_ID=...             # the media ID printed by \`replicas media upload\`
 
+linear_graphql() {
+  curl -sS -X POST "$MONOLITH_URL/v1/engine/linear/graphql" \\
+    -H "Authorization: Bearer $REPLICAS_ENGINE_SECRET" \\
+    -H "X-Workspace-Id: $WORKSPACE_ID" \\
+    -H "Content-Type: application/json" \\
+    --data-binary @-
+}
+
 # 1. Ask Linear for an upload URL + assetUrl.
-RESERVE=$(curl -s -X POST https://api.linear.app/graphql \\
-  -H "Authorization: Bearer $LINEAR_ACCESS_TOKEN" \\
-  -H "Content-Type: application/json" \\
-  -d "$(jq -n \\
+RESERVE=$(jq -n \\
     --argjson size "$SIZE" \\
     --arg contentType "$CONTENT_TYPE" \\
     --arg filename "$FILENAME" \\
     '{
       query: "mutation($size: Int!, $contentType: String!, $filename: String!) { fileUpload(size: $size, contentType: $contentType, filename: $filename) { uploadFile { uploadUrl assetUrl headers { key value } } } }",
       variables: { size: $size, contentType: $contentType, filename: $filename }
-    }')")
+    }' | linear_graphql)
 UPLOAD_URL=$(echo "$RESERVE" | jq -r '.data.fileUpload.uploadFile.uploadUrl')
 ASSET_URL=$(echo "$RESERVE" | jq -r '.data.fileUpload.uploadFile.assetUrl')
 
@@ -1473,16 +1491,13 @@ curl -s -X PUT "$UPLOAD_URL" \\
 BODY=$(printf '![screenshot](%s)\\n\\n[View in Replicas](https://tryreplicas.com/workspaces/%s?mode=media&media=%s)' \\
   "$ASSET_URL" "$WORKSPACE_ID" "$MEDIA_ID")
 
-curl -s -X POST https://api.linear.app/graphql \\
-  -H "Authorization: Bearer $LINEAR_ACCESS_TOKEN" \\
-  -H "Content-Type: application/json" \\
-  -d "$(jq -n \\
+jq -n \\
     --arg issueId "$ISSUE_UUID" \\
     --arg body "$BODY" \\
     '{
       query: "mutation($issueId: String!, $body: String!) { commentCreate(input: { issueId: $issueId, body: $body }) { success } }",
       variables: { issueId: $issueId, body: $body }
-    }')"
+    }' | linear_graphql
 \`\`\`
 
 The same flow works for issue bodies (use \`issueCreate\` / \`issueUpdate\` with the same markdown body).
@@ -5610,13 +5625,29 @@ function inferMediaType(url, contentType) {
   if (urlLower.includes(".webp")) return "image/webp";
   return "image/jpeg";
 }
-async function fetchImageAsBase64(url) {
+async function getLinearAccessToken() {
+  try {
+    const response = await monolithRequest("/v1/engine/linear/refresh-token");
+    if (!response.ok) {
+      console.warn(`[ImageUtils] Failed to refresh Linear token: ${response.status} ${await response.text()}`);
+      return ENGINE_ENV.LINEAR_ACCESS_TOKEN;
+    }
+    const data = await response.json();
+    return data.token;
+  } catch (error) {
+    console.warn("[ImageUtils] Failed to refresh Linear token:", error);
+    return ENGINE_ENV.LINEAR_ACCESS_TOKEN;
+  }
+}
+function isLinearUploadUrl(url) {
+  return new URL(url).hostname === "uploads.linear.app";
+}
+async function fetchImageAsBase64(url, linearAccessToken) {
   const headers = {};
   const hostname = new URL(url).hostname;
   if (hostname === "uploads.linear.app") {
-    const token = ENGINE_ENV.LINEAR_ACCESS_TOKEN;
-    if (token) {
-      headers["Authorization"] = `Bearer ${token}`;
+    if (linearAccessToken) {
+      headers["Authorization"] = `Bearer ${linearAccessToken}`;
     }
   }
   if (hostname === "files.slack.com") {
@@ -5651,6 +5682,8 @@ async function fetchImageAsBase64(url) {
 }
 async function normalizeImages(images) {
   const normalized = [];
+  let linearAccessToken;
+  let linearAccessTokenLoaded = false;
   for (const image of images) {
     if (image.source.type === "base64") {
       normalized.push({
@@ -5658,7 +5691,11 @@ async function normalizeImages(images) {
         source: image.source
       });
     } else if (image.source.type === "url") {
-      const base64Source = await fetchImageAsBase64(image.source.url);
+      if (!linearAccessTokenLoaded && isLinearUploadUrl(image.source.url)) {
+        linearAccessToken = await getLinearAccessToken();
+        linearAccessTokenLoaded = true;
+      }
+      const base64Source = await fetchImageAsBase64(image.source.url, linearAccessToken);
       normalized.push({
         type: "image",
         source: base64Source
@@ -7691,7 +7728,7 @@ var AspClient = class {
 // src/managers/codex-asp/app-server-process.ts
 var DEFAULT_CODEX_BINARY = "codex";
 var DEFAULT_CODEX_ARGS = ["app-server", "--listen", "stdio://"];
-var ENGINE_PACKAGE_VERSION = "0.1.367";
+var ENGINE_PACKAGE_VERSION = "0.1.368";
 var INITIALIZE_METHOD = "initialize";
 var INITIALIZED_NOTIFICATION = "initialized";
 var ACCOUNT_LOGIN_START_METHOD = "account/login/start";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replicas-engine",
-  "version": "0.1.367",
+  "version": "0.1.368",
   "description": "Lightweight API server for Replicas workspaces",
   "type": "module",
   "main": "dist/src/index.js",